Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
File: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft (raw, json)
Hash identifier: /uU9/CclZD772k7w3K+UTFD4iwXtpRov6xWOiAbW+3s=
Subject key identifier: 85:60:37:6B:3F:AE:BD:33:A6:B8:22:EA:1A:08:BA:E9:B4:6C:DF:3C
Authority key identifier: 67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
Certificate issuer: /CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Certificate serial: 019DA59D9C2A2C6B01EC691687C925BD307B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
Manifest number: 5D
Signing time: Sun 19 Apr 2026 12:01:02 +0000
Manifest this update: Sun 19 Apr 2026 12:01:02 +0000
Manifest next update: Mon 20 Apr 2026 12:01:02 +0000
Files and hashes: 1: CuP-Ha4tOWBJT0pI4E4cOyq4rrs.roa (hash: PnhyGfN8Xq/cQidLwJYXET+Yc1KaRnRUtuvyvf2jYVs=)
2: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl (hash: OUbTWo2Yn+uFVCkWDmDWHa4ITOiPWre6LTn5lmbZRv8=)
3: Z_qYOE4e2l4gEvD0IWAegIDMPig.asa (hash: eWA5Ad2XFQpR/DOWcwIfkGbSUhBVracuKwSeTKFgw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:9c:2a:2c:6b:01:ec:69:16:87:c9:25:bd:30:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Validity
Not Before: Apr 19 12:01:02 2026 GMT
Not After : Apr 20 12:01:02 2026 GMT
Subject: CN=8560376b3faebd33a6b822ea1a08bae9b46cdf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:7b:c3:0a:be:4e:f9:e3:2e:1a:f6:bd:c9:
49:72:25:85:01:7d:73:54:15:b8:02:9e:f8:38:c9:
40:3b:7c:a8:3b:61:ef:7b:3c:fe:bb:ec:0b:3f:0e:
ae:68:3d:9e:82:a0:b2:00:af:ab:fd:83:ff:e4:db:
c7:5e:18:7c:58:e7:c2:f9:4e:08:b7:48:17:75:ef:
24:ff:bb:3d:00:10:b3:4c:2f:64:a1:54:d5:e8:76:
43:1c:ce:cc:af:5b:87:27:5a:29:d1:6b:b2:8d:21:
59:2f:27:b6:72:39:81:2f:c1:26:df:e3:3e:3e:18:
23:bd:ea:74:08:16:07:35:d6:ed:68:19:61:2a:22:
76:ac:97:94:40:09:a1:ae:3c:71:a8:16:10:62:4c:
21:10:eb:cf:60:02:9b:51:10:2d:f2:df:59:7c:c2:
4c:46:5f:8a:63:34:11:e9:2c:2b:f5:2b:27:e1:b9:
b8:60:9a:28:32:2c:00:3b:b4:81:b0:a4:74:66:f7:
89:69:7f:30:18:12:82:c4:51:3a:6c:4a:15:0c:85:
aa:14:fd:23:63:0a:c2:97:8f:6b:a7:4d:33:12:fb:
bc:ee:f6:c6:6e:f2:00:af:fc:00:f6:80:bf:78:cb:
c5:66:b0:78:e9:a4:8e:fc:26:2a:5a:d5:d6:ec:91:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:60:37:6B:3F:AE:BD:33:A6:B8:22:EA:1A:08:BA:E9:B4:6C:DF:3C
X509v3 Authority Key Identifier:
keyid:67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:df:cb:ae:ff:6d:b3:54:8c:35:64:d4:bd:57:23:ec:97:
bc:99:36:64:72:27:41:c1:bb:8d:2f:da:2f:06:ee:a6:7b:5c:
8e:09:f1:c7:11:d0:f7:ec:7f:94:c9:22:37:e4:ad:e7:9c:e1:
d5:27:72:cf:f7:58:ca:24:7f:d4:ef:95:99:5a:47:11:f9:b3:
cf:e6:96:8e:d6:ca:59:6c:c4:6e:b9:ec:39:f6:bb:9c:fc:22:
1c:c1:c9:9f:06:ab:88:f9:1e:8f:c3:73:8d:42:fd:c6:2c:f7:
7c:97:53:f5:75:2e:e2:6e:1f:72:bd:9a:2e:35:a0:f0:31:02:
84:ef:a2:71:ab:9f:db:73:c9:2f:c6:e6:dc:93:f1:45:de:9e:
8c:53:ce:67:2f:0d:a3:c2:35:24:7d:34:11:c7:f6:69:47:94:
4e:55:ef:d8:94:eb:6a:55:77:3e:60:26:83:50:9f:c7:df:c3:
82:20:18:1b:1c:af:94:d6:95:99:9a:87:95:b7:35:9a:6e:f6:
07:22:01:56:ec:1b:e5:d1:fb:a7:48:d5:9a:97:eb:9d:97:3c:
8d:91:45:cd:a2:bb:58:b1:ac:c1:f4:a0:b7:34:53:64:a7:5a:
74:98:31:6f:c7:41:7c:b6:75:8a:05:38:3a:4d:d9:37:96:a7:
f5:6c:d5:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lnZwqLGsB7GkWh8klvTB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmE5NzlkZDA4ZGJlMDNjMTc0OGEwMjJmYTY2NTRkMzYx
MTk0MGYwHhcNMjYwNDE5MTIwMTAyWhcNMjYwNDIwMTIwMTAyWjAzMTEwLwYDVQQD
Eyg4NTYwMzc2YjNmYWViZDMzYTZiODIyZWExYTA4YmFlOWI0NmNkZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngJ7wwq+TvnjLhr2vclJciWFAX1z
VBW4Ap74OMlAO3yoO2Hvezz+u+wLPw6uaD2egqCyAK+r/YP/5NvHXhh8WOfC+U4I
t0gXde8k/7s9ABCzTC9koVTV6HZDHM7Mr1uHJ1op0WuyjSFZLye2cjmBL8Em3+M+
Phgjvep0CBYHNdbtaBlhKiJ2rJeUQAmhrjxxqBYQYkwhEOvPYAKbURAt8t9ZfMJM
Rl+KYzQR6Swr9Ssn4bm4YJooMiwAO7SBsKR0ZveJaX8wGBKCxFE6bEoVDIWqFP0j
YwrCl49rp00zEvu87vbGbvIAr/wA9oC/eMvFZrB46aSO/CYqWtXW7JG2/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVgN2s/rr0zprgi6hoIuum0bN88MB8GA1UdIwQY
MBaAFGe6l53Qjb4DwXSKAi+mZU02EZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMzBjMDQtZWVmYS00NTMxLTkwZDAt
MDE0NGZkNzdlYmU0LzEvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMzBjMDQtZWVmYS00NTMxLTkwZDAtMDE0NGZkNzdlYmU0
LzEvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVXfy67/
bbNUjDVk1L1XI+yXvJk2ZHInQcG7jS/aLwbupntcjgnxxxHQ9+x/lMkiN+St55zh
1Sdyz/dYyiR/1O+VmVpHEfmzz+aWjtbKWWzEbrnsOfa7nPwiHMHJnwariPkej8Nz
jUL9xiz3fJdT9XUu4m4fcr2aLjWg8DEChO+icauf23PJL8bm3JPxRd6ejFPOZy8N
o8I1JH00Ecf2aUeUTlXv2JTralV3PmAmg1Cfx9/DgiAYGxyvlNaVmZqHlbc1mm72
ByIBVuwb5dH7p0jVmpfrnZc8jZFFzaK7WLGswfSgtzRTZKdadJgxb8dBfLZ1igU4
Ok3ZN5an9WzVKg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:26 2026 by rpki-client